Penetration Testing
Hands-on testing of external and internal systems, with an emphasis on what can actually be reached, combined, or escalated.
Services
Security work built around the system in front of us.
Different environments fail in different ways. These are the main areas we work in, but the exact scope is shaped around what you need tested and what you are trying to learn.
View service
Web & API Security
Manual testing of authentication, authorization, business logic, APIs, and the assumptions that sit between them.
Infrastructure Security
Review networks, hosts, identity, exposed services, and privilege boundaries to find where small weaknesses can turn into larger ones.
Security Architecture
Review how a system is put together, where it places trust, and whether the controls around it hold up under realistic misuse.